Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/eb230e629031678e39b5d81e21dc985c859dc27c.roa
File:                     eb230e629031678e39b5d81e21dc985c859dc27c.roa (raw, json)
Hash identifier:          hFm0ZpFp9W6OOuHr4QV9zA5/HCK3QUmI7dAig0hPf5Q=
Subject key identifier:   77:75:8F:6C:58:C5:BB:71:D6:37:B4:B6:07:D3:55:C6:CE:96:81:2B
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       13DF
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/eb230e629031678e39b5d81e21dc985c859dc27c.roa
Signing time:             Wed 09 Aug 2023 14:29:03 +0000
ROA not before:           Tue 08 Aug 2023 14:29:03 +0000
ROA not after:            Sat 09 Aug 2025 14:29:03 +0000
asID:                     11344
IP address blocks:        181.224.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5087 (0x13df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 14:29:03 2023 GMT
            Not After : Aug  9 14:29:03 2025 GMT
        Subject: CN=eb230e629031678e39b5d81e21dc985c859dc27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:bc:24:74:3b:32:b2:6c:b7:b6:11:82:02:
                    28:db:3b:5d:03:2c:db:75:23:1c:79:8c:e9:82:8c:
                    31:38:4b:98:51:a2:8f:dc:c6:a7:c6:ce:a6:52:6c:
                    f5:bd:51:e5:6b:f3:ad:6c:5c:bd:64:7b:39:a8:30:
                    52:41:ce:00:5c:2c:75:31:4a:56:45:61:6a:58:5a:
                    45:5f:73:8d:42:15:4d:58:ed:0c:51:9b:1e:21:60:
                    6e:e1:79:cc:68:66:c7:fa:f0:89:ab:34:f3:27:37:
                    f6:62:34:8e:77:0b:3a:69:8e:72:c5:69:44:b5:73:
                    b4:2e:57:a9:5b:cf:c7:41:34:e0:5e:71:fc:a0:92:
                    c0:46:3e:b1:e0:a9:04:31:a8:31:71:25:a3:33:76:
                    0c:9f:13:15:5b:6e:3d:dd:1a:20:d6:06:e8:8b:3b:
                    5e:ce:1a:84:fe:85:f1:c0:f5:78:ef:5d:2b:51:17:
                    b0:c4:e0:e9:0b:88:96:e9:4b:a3:cc:07:11:66:9f:
                    0a:14:71:0e:2d:7c:07:65:0e:5d:f4:17:c2:91:6f:
                    a9:ba:42:52:27:5a:0b:74:e0:41:9e:19:51:c2:36:
                    22:9c:00:01:88:33:96:77:f1:aa:d0:25:5d:f3:87:
                    23:4c:0b:72:d0:69:9b:ce:63:99:ee:a6:15:10:96:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:75:8F:6C:58:C5:BB:71:D6:37:B4:B6:07:D3:55:C6:CE:96:81:2B
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/eb230e629031678e39b5d81e21dc985c859dc27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:07:91:b2:65:6a:ac:6e:79:5d:c4:4d:b8:d4:29:47:89:
         88:18:95:9d:e1:82:af:e8:88:eb:e3:79:81:4a:0b:7b:c6:c7:
         35:7a:29:ac:eb:f1:1e:a3:89:de:00:36:8c:91:67:c7:c7:35:
         c6:0b:8a:76:b1:b0:0e:70:62:a6:f1:f5:b3:3f:86:fc:5b:68:
         e4:20:7e:4d:ac:82:70:d8:f3:85:59:2e:f2:fc:bd:63:6f:d4:
         99:b7:80:98:95:98:23:92:8a:f9:33:26:7a:76:40:59:31:04:
         f1:95:2e:00:be:84:1e:39:97:18:14:86:46:0c:13:d8:c4:fe:
         91:a3:bd:3e:67:cf:e4:90:af:8c:56:7c:5b:6c:02:f4:19:c7:
         f7:98:8b:86:3f:25:4e:ae:bb:9a:61:87:29:ee:f9:c0:e8:c0:
         f1:11:5f:a6:0e:e1:e4:a9:61:3a:fc:c4:eb:27:ce:1d:d1:50:
         b5:04:60:df:0e:04:6c:0f:c5:8f:d9:68:0c:86:fb:1b:b1:00:
         44:ff:25:7a:2b:5d:08:f8:49:c8:e1:51:9e:0e:66:4b:3f:50:
         26:e5:1c:7f:0c:2b:b6:0c:72:56:66:2b:b3:42:3e:04:ae:3d:
         22:58:47:4f:4f:67:b8:d3:83:d0:24:1d:b7:f6:67:b0:d6:de:
         35:3e:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org